@composio/client 0.1.0-alpha.70 → 0.1.0-alpha.72

package/src/resources/connected-accounts.ts

@@ -212,6 +212,12 @@ export interface ConnectedAccountCreateResponse {
    * @deprecated DEPRECATED: This field will be removed in a future version
    */
   status: 'INITIALIZING' | 'INITIATED' | 'ACTIVE' | 'FAILED' | 'EXPIRED' | 'INACTIVE' | 'REVOKED';
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  experimental?: ConnectedAccountCreateResponse.Experimental;
 }
 
 export namespace ConnectedAccountCreateResponse {
@@ -743,6 +749,8 @@ export namespace ConnectedAccountCreateResponse {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;
@@ -833,6 +841,8 @@ export namespace ConnectedAccountCreateResponse {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;
@@ -4633,6 +4643,41 @@ export namespace ConnectedAccountCreateResponse {
      */
     uuid: string;
   }
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Sharing model for this connected account. PRIVATE is usable only by the owning
+     * user_id. SHARED is reachable from a tool-router session only when explicitly
+     * pinned in the session config.
+     */
+    account_type: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    export interface ACLConfigForShared {
+      allow_all_users: boolean;
+
+      allowed_user_ids: Array<string>;
+
+      not_allowed_user_ids: Array<string>;
+    }
+  }
 }
 
 export interface ConnectedAccountRetrieveResponse {
@@ -4727,6 +4772,12 @@ export interface ConnectedAccountRetrieveResponse {
    */
   deprecated?: ConnectedAccountRetrieveResponse.Deprecated;
 
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  experimental?: ConnectedAccountRetrieveResponse.Experimental;
+
   /**
    * The endpoint to make test request for verification
    */
@@ -5315,6 +5366,8 @@ export namespace ConnectedAccountRetrieveResponse {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;
@@ -5405,6 +5458,8 @@ export namespace ConnectedAccountRetrieveResponse {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;
@@ -9211,6 +9266,41 @@ export namespace ConnectedAccountRetrieveResponse {
      */
     uuid: string;
   }
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Sharing model for this connected account. PRIVATE is usable only by the owning
+     * user_id. SHARED is reachable from a tool-router session only when explicitly
+     * pinned in the session config.
+     */
+    account_type: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    export interface ACLConfigForShared {
+      allow_all_users: boolean;
+
+      allowed_user_ids: Array<string>;
+
+      not_allowed_user_ids: Array<string>;
+    }
+  }
 }
 
 export interface ConnectedAccountListResponse {
@@ -9312,6 +9402,12 @@ export namespace ConnectedAccountListResponse {
      */
     deprecated?: Item.Deprecated;
 
+    /**
+     * Experimental features - not stable, may be modified or removed in future
+     * versions.
+     */
+    experimental?: Item.Experimental;
+
     /**
      * The endpoint to make test request for verification
      */
@@ -9900,6 +9996,8 @@ export namespace ConnectedAccountListResponse {
 
         extension?: string;
 
+        extra_token_data?: { [key: string]: unknown };
+
         form_api_base_url?: string;
 
         id_token?: string;
@@ -9990,6 +10088,8 @@ export namespace ConnectedAccountListResponse {
 
         extension?: string;
 
+        extra_token_data?: { [key: string]: unknown };
+
         form_api_base_url?: string;
 
         id_token?: string;
@@ -13796,6 +13896,41 @@ export namespace ConnectedAccountListResponse {
        */
       uuid: string;
     }
+
+    /**
+     * Experimental features - not stable, may be modified or removed in future
+     * versions.
+     */
+    export interface Experimental {
+      /**
+       * Sharing model for this connected account. PRIVATE is usable only by the owning
+       * user_id. SHARED is reachable from a tool-router session only when explicitly
+       * pinned in the session config.
+       */
+      account_type: 'PRIVATE' | 'SHARED';
+
+      /**
+       * Access control for SHARED connections. Visible only to the connection creator
+       * and project/org API key callers; non-creator cookie callers receive the response
+       * without this block.
+       */
+      acl_config_for_shared?: Experimental.ACLConfigForShared;
+    }
+
+    export namespace Experimental {
+      /**
+       * Access control for SHARED connections. Visible only to the connection creator
+       * and project/org API key callers; non-creator cookie callers receive the response
+       * without this block.
+       */
+      export interface ACLConfigForShared {
+        allow_all_users: boolean;
+
+        allowed_user_ids: Array<string>;
+
+        not_allowed_user_ids: Array<string>;
+      }
+    }
   }
 }
 
@@ -13901,6 +14036,12 @@ export namespace ConnectedAccountCreateParams {
      */
     deprecated_is_v1_rerouted?: boolean;
 
+    /**
+     * Experimental features - not stable, may be modified or removed in future
+     * versions.
+     */
+    experimental?: Connection.Experimental;
+
     /**
      * @deprecated DEPRECATED: This parameter will be removed in a future version.
      * Please use callback_url instead.
@@ -13933,6 +14074,54 @@ export namespace ConnectedAccountCreateParams {
   }
 
   export namespace Connection {
+    /**
+     * Experimental features - not stable, may be modified or removed in future
+     * versions.
+     */
+    export interface Experimental {
+      /**
+       * Sharing model for this connected account. PRIVATE (default) is usable only by
+       * the owning user_id. SHARED is reachable from a tool-router session ONLY when
+       * explicitly pinned in the session config — at most one SHARED connection per
+       * toolkit per session. Sessions never use a SHARED connection implicitly.
+       */
+      account_type?: 'PRIVATE' | 'SHARED';
+
+      /**
+       * Access control for SHARED connections. Resolution rule (only fires when caller
+       * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+       * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+       * deny-by-default — only the creator can use.
+       */
+      acl_config_for_shared?: Experimental.ACLConfigForShared;
+    }
+
+    export namespace Experimental {
+      /**
+       * Access control for SHARED connections. Resolution rule (only fires when caller
+       * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+       * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+       * deny-by-default — only the creator can use.
+       */
+      export interface ACLConfigForShared {
+        /**
+         * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+         * connections.
+         */
+        allow_all_users?: boolean;
+
+        /**
+         * Explicit allow list of user_ids who can use this SHARED connection.
+         */
+        allowed_user_ids?: Array<string>;
+
+        /**
+         * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+         */
+        not_allowed_user_ids?: Array<string>;
+      }
+    }
+
     export interface UnionMember0 {
       authScheme: 'OAUTH1';
 
@@ -14461,6 +14650,8 @@ export namespace ConnectedAccountCreateParams {
 
         extension?: string;
 
+        extra_token_data?: { [key: string]: unknown };
+
         form_api_base_url?: string;
 
         id_token?: string;
@@ -14551,6 +14742,8 @@ export namespace ConnectedAccountCreateParams {
 
         extension?: string;
 
+        extra_token_data?: { [key: string]: unknown };
+
         form_api_base_url?: string;
 
         id_token?: string;
@@ -18339,6 +18532,13 @@ export namespace ConnectedAccountCreateParams {
 }
 
 export interface ConnectedAccountListParams {
+  /**
+   * [Experimental] Filter by sharing model. Default (omitted) returns PRIVATE only —
+   * shared accounts must be requested explicitly. Pass SHARED for only shared
+   * accounts, or ALL for PRIVATE + SHARED.
+   */
+  account_type?: 'PRIVATE' | 'SHARED' | 'ALL';
+
   /**
    * The auth config ids of the connected accounts
    */
@@ -18395,6 +18595,12 @@ export interface ConnectedAccountPatchParams {
   alias?: string;
 
   connection?: ConnectedAccountPatchParams.Connection;
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  experimental?: ConnectedAccountPatchParams.Experimental;
 }
 
 export namespace ConnectedAccountPatchParams {
@@ -18499,6 +18705,46 @@ export namespace ConnectedAccountPatchParams {
       }
     }
   }
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    export interface ACLConfigForShared {
+      /**
+       * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+       * connections.
+       */
+      allow_all_users?: boolean;
+
+      /**
+       * Explicit allow list of user_ids who can use this SHARED connection.
+       */
+      allowed_user_ids?: Array<string>;
+
+      /**
+       * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+       */
+      not_allowed_user_ids?: Array<string>;
+    }
+  }
 }
 
 export interface ConnectedAccountRefreshParams {

package/src/resources/link.ts

@@ -37,6 +37,49 @@ export interface LinkCreateResponse {
    * The redirect URI to send users to for authentication
    */
   redirect_url: string;
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  experimental?: LinkCreateResponse.Experimental;
+}
+
+export namespace LinkCreateResponse {
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Sharing model for this connected account. PRIVATE is usable only by the owning
+     * user_id. SHARED is reachable from a tool-router session only when explicitly
+     * pinned in the session config.
+     */
+    account_type: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    export interface ACLConfigForShared {
+      allow_all_users: boolean;
+
+      allowed_user_ids: Array<string>;
+
+      not_allowed_user_ids: Array<string>;
+    }
+  }
 }
 
 export interface LinkCreateParams {
@@ -140,6 +183,12 @@ export interface LinkCreateParams {
     | LinkCreateParams.UnionMember72
     | LinkCreateParams.UnionMember73
     | LinkCreateParams.UnionMember74;
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  experimental?: LinkCreateParams.Experimental;
 }
 
 export namespace LinkCreateParams {
@@ -625,6 +674,8 @@ export namespace LinkCreateParams {
 
     extension?: string;
 
+    extra_token_data?: { [key: string]: unknown };
+
     form_api_base_url?: string;
 
     id_token?: string;
@@ -713,6 +764,8 @@ export namespace LinkCreateParams {
 
     extension?: string;
 
+    extra_token_data?: { [key: string]: unknown };
+
     form_api_base_url?: string;
 
     id_token?: string;
@@ -4208,6 +4261,54 @@ export namespace LinkCreateParams {
 
     [k: string]: unknown;
   }
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Sharing model for this connected account. PRIVATE (default) is usable only by
+     * the owning user_id. SHARED is reachable from a tool-router session ONLY when
+     * explicitly pinned in the session config — at most one SHARED connection per
+     * toolkit per session. Sessions never use a SHARED connection implicitly.
+     */
+    account_type?: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    export interface ACLConfigForShared {
+      /**
+       * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+       * connections.
+       */
+      allow_all_users?: boolean;
+
+      /**
+       * Explicit allow list of user_ids who can use this SHARED connection.
+       */
+      allowed_user_ids?: Array<string>;
+
+      /**
+       * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+       */
+      not_allowed_user_ids?: Array<string>;
+    }
+  }
 }
 
 export declare namespace Link {

package/src/resources/tool-router/session/session.ts

@@ -1687,6 +1687,49 @@ export interface SessionLinkResponse {
    * The URL where users should be redirected to complete OAuth
    */
   redirect_url: string;
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  experimental?: SessionLinkResponse.Experimental;
+}
+
+export namespace SessionLinkResponse {
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Sharing model for this connected account. PRIVATE is usable only by the owning
+     * user_id. SHARED is reachable from a tool-router session only when explicitly
+     * pinned in the session config.
+     */
+    account_type: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    export interface ACLConfigForShared {
+      allow_all_users: boolean;
+
+      allowed_user_ids: Array<string>;
+
+      not_allowed_user_ids: Array<string>;
+    }
+  }
 }
 
 export interface SessionPatchResponse {
@@ -3615,6 +3658,62 @@ export interface SessionLinkParams {
    * URL where users will be redirected after completing auth
    */
   callback_url?: string;
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  experimental?: SessionLinkParams.Experimental;
+}
+
+export namespace SessionLinkParams {
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Sharing model for this connected account. PRIVATE (default) is usable only by
+     * the owning user_id. SHARED is reachable from a tool-router session ONLY when
+     * explicitly pinned in the session config — at most one SHARED connection per
+     * toolkit per session. Sessions never use a SHARED connection implicitly.
+     */
+    account_type?: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    export interface ACLConfigForShared {
+      /**
+       * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+       * connections.
+       */
+      allow_all_users?: boolean;
+
+      /**
+       * Explicit allow list of user_ids who can use this SHARED connection.
+       */
+      allowed_user_ids?: Array<string>;
+
+      /**
+       * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+       */
+      not_allowed_user_ids?: Array<string>;
+    }
+  }
 }
 
 export interface SessionPatchParams {
@@ -3899,7 +3998,9 @@ export interface SessionProxyExecuteParams {
    * content_type?: "..."}. For binary upload via base64: use {base64: "...",
    * content_type?: "..."}.
    */
-  binary_body?: SessionProxyExecuteParams.UnionMember0 | SessionProxyExecuteParams.UnionMember1;
+  binary_body?:
+    | SessionProxyExecuteParams.BinaryBodyUnionMember0
+    | SessionProxyExecuteParams.BinaryBodyUnionMember1;
 
   /**
    * The request body (for POST, PUT, and PATCH requests)
@@ -3926,7 +4027,7 @@ export interface SessionProxyExecuteParams {
 }
 
 export namespace SessionProxyExecuteParams {
-  export interface UnionMember0 {
+  export interface BinaryBodyUnionMember0 {
     /**
      * URL to fetch binary content from
      */
@@ -3938,7 +4039,7 @@ export namespace SessionProxyExecuteParams {
     content_type?: string;
   }
 
-  export interface UnionMember1 {
+  export interface BinaryBodyUnionMember1 {
     /**
      * Base64-encoded binary data
      */
@@ -3987,6 +4088,8 @@ export namespace SessionProxyExecuteParams {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;

package/src/resources/toolkits.ts

@@ -268,8 +268,12 @@ export namespace ToolkitRetrieveResponse {
 
           type: string;
 
+          advanced?: boolean;
+
           default?: string | null;
 
+          is_secret?: boolean;
+
           legacy_template_name?: string;
         }
 
@@ -284,8 +288,12 @@ export namespace ToolkitRetrieveResponse {
 
           type: string;
 
+          advanced?: boolean;
+
           default?: string | null;
 
+          is_secret?: boolean;
+
           legacy_template_name?: string;
         }
       }
@@ -312,8 +320,12 @@ export namespace ToolkitRetrieveResponse {
 
           type: string;
 
+          advanced?: boolean;
+
           default?: string | null;
 
+          is_secret?: boolean;
+
           legacy_template_name?: string;
         }
 
@@ -328,8 +340,12 @@ export namespace ToolkitRetrieveResponse {
 
           type: string;
 
+          advanced?: boolean;
+
           default?: string | null;
 
+          is_secret?: boolean;
+
           legacy_template_name?: string;
         }
       }